Posté par: igor51 le octobre 24, 2018, 16:00:04
We recently found a malware that abuses two legitimate Windows files — the command line utility wmic.exe and certutil.exe, a program that manages certificates for Windows — to download its payload onto the victim’s device. What’s notable about these files is that they are also used to download other files as part of its normal set of features, making them susceptible to abuse for malicious purposes.
The post Malware Targeting Brazil Uses Legitimate Windows Components WMI and CertUtil as Part of its Routine appeared first on .
Source: Malware Targeting Brazil Uses Legitimate Windows Components WMI and CertUtil as Part of its Routine (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/6Pang8vAOU4/)